Facilitics Privacy Policy

1. Information We Collect

To provide facility management, preventive maintenance tracking, fuel audit logging, and audit report generation, Facilitics("we", "us", or "Company") collects two categories of information:

• Account & Personnel Information: Names, work email addresses, phone numbers, and organizational role assignments provided during user onboarding or team management.
• Facility Operational Telemetry: Equipment codes, maintenance checklist entries, fuel issuance logs, generator meter readings, photo evidence uploads, and vendor work orders.

2. How We Use Information

We process operational and personal data solely to operate, maintain, and improve the Facilitics platform for your organization:

• Facilitating asset tracking, preventive maintenance alerts, and ticket workflows.
• Dispatching operational email notifications (e.g. support alerts, vendor dispatch links).
• Compiling compliance audit logs, executive summary reports, and PDF exports.
• Enforcing multi-tenant company data isolation and user role access controls.

3.Data Security & Hosting Infrastructure

Facilitics employs cloud infrastructure and security practices engineered to protect your organizational records:

• Cloud Hosting: Data is stored on cloud infrastructure managed by Supabase, with industry-standard physical, technical, and administrative safeguards.
• Encryption in Transit & at Rest: All web traffic is encrypted in transit using industry-standard TLS protocols. Stored records and binary file evidence are encrypted at rest.
• Row-Level Security (RLS): Database queries strictly enforce tenant isolation (company_id scope), preventing cross-company data access.

4.Data Retention & Ownership

Customers retain full legal ownership of their facility maintenance records and uploaded evidence media. We retain Customer Data for the duration of your active subscription. Upon account closure or contract termination, clients may request a full data export or permanent deletion of their tenant records.

5.Cookies & Local Storage

Facilitics uses essential session cookies and browser local storage (including IndexedDB for offline queue handling) strictly required for authentication, security, and offline field data synchronization. We do not sell user data to third-party advertising brokers.

6. Lawful Basis for Processing (NDPA 2023)

The Nigeria Data Protection Act 2023 (NDPA 2023) is the governing data protection legislation under which Facilitics operates. We process personal data only where a lawful basis exists, including the following:

• Legitimate Interests: Operating and securing the platform, fraud prevention, and ongoing service improvement to deliver a reliable facility management experience.
• Contractual Necessity: Processing required to deliver facility management services per your subscription agreement, including asset tracking, maintenance scheduling, and report generation.
• Legal Obligation: Compliance with Nigerian regulatory requirements, court orders, and law enforcement requests where applicable.
• Consent: Where processing exceeds the bases outlined above, explicit consent is obtained from data subjects prior to processing (e.g. marketing communications and promotional updates).

7. Data Subject Rights Under NDPA 2023

Under the Nigeria Data Protection Act 2023, data subjects have the following rights in relation to the personal data Facilitics holds:

• Right of Access: Request a copy of the personal data held about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of personal data where no lawful basis for retention exists.
• Right to Restrict Processing: Request temporary suspension of processing activities concerning your data.
• Right to Data Portability: Receive your data in a structured, machine-readable format for transfer to another controller.
• Right to Object: Object to processing based on legitimate interests where your particular circumstances warrant it.
• Right to Withdraw Consent: Where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact us at info@facilitics.com.ng. Facilitics will respond to valid requests within 30 days in accordance with the NDPA 2023.

The supervisory authority responsible for data protection oversight is the Nigeria Data Protection Commission (NDPC).

8. International Data Transfers

Facilitics uses cloud infrastructure providers (Supabase, Vercel) whose data centers may be located outside the Federal Republic of Nigeria. Where personal data is transferred internationally, Facilitics ensures adequate safeguards are in place, including Standard Contractual Clauses and reliance on adequacy decisions recognized under the NDPA 2023.

All international data transfers are conducted in compliance with Part IV of the Nigeria Data Protection Act 2023, ensuring that your personal data receives an equivalent level of protection regardless of the jurisdiction in which it is processed or stored.

9.Policy Updates & Product Evolution

Facilitics is an evolving platform. As we launch new operational modules, integrate verified infrastructure partners, or expand our regulatory posture, we may revise this Privacy Policy from time to time.

The date at the top of this policy indicates when it was last updated. For material changes that impact how your organizational data is processed, we will provide notice via in-app alerts or email before changes take effect. Your continued use of the Service following any policy update constitutes acceptance of the revised terms.

10.Privacy Inquiries & Contact

If you have any questions, data access requests, or privacy concerns regarding this policy, please reach out to our team at: